This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft File: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft (raw, json) Hash identifier: mjbPy7UP40/VX/wkQ9dJvKGicElprMlzuBd29KUrO8A= Subject key identifier: 8F:98:C2:17:62:0E:9E:A7:48:55:59:9C:D9:BF:E0:F0:0F:79:68:10 Authority key identifier: 36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6 Certificate issuer: /CN=36be697c8489f482220f5c4064babe4c83c419d6 Certificate serial: 019B5ABF96545EAC570762CEE8932A113423 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft Manifest number: 0C26 Signing time: Fri 26 Dec 2025 13:01:03 +0000 Manifest this update: Fri 26 Dec 2025 13:01:03 +0000 Manifest next update: Sat 27 Dec 2025 13:01:03 +0000 Files and hashes: 1: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl (hash: V7KZXdvXYLL0o2x1cVdrcZRvPEswSB8IGMPDjzoXROI=) 2: SN4WN6j4-rBWWV-Y2IngI0okDFk.roa (hash: /CIKiQgS+ZyX8NEUirY7oJW+SA7En87kVbxutLDyvcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 13:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:96:54:5e:ac:57:07:62:ce:e8:93:2a:11:34:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36be697c8489f482220f5c4064babe4c83c419d6 Validity Not Before: Dec 26 13:01:03 2025 GMT Not After : Dec 27 13:01:03 2025 GMT Subject: CN=8f98c217620e9ea74855599cd9bfe0f00f796810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a6:1f:d9:8a:96:d0:66:b9:f1:95:e0:9f:37: 29:ec:8c:fb:ad:41:20:25:5d:7f:51:d5:34:41:70: 0e:68:88:c3:36:e9:0f:48:b0:7f:4c:3a:8e:c8:83: 79:35:9b:a4:29:4a:f8:5e:11:b8:14:21:cb:74:16: e8:c5:a7:24:bf:34:bf:67:2d:84:d3:dc:70:88:2b: 96:8f:84:4f:3c:32:24:96:92:e6:51:f8:1f:16:ea: d2:ec:8b:c2:7f:71:f8:b2:85:20:41:af:be:db:6a: 4f:5c:4f:65:4e:39:b8:3f:a3:ec:12:5f:cd:d8:76: 4a:f1:f1:80:69:df:3e:0b:9f:35:a8:cc:da:16:a8: 50:97:39:11:a9:16:57:11:1e:91:ae:25:b4:94:fe: 08:15:b7:b3:0a:bb:ed:1d:95:9d:f9:9b:2c:ff:bb: f2:53:33:d7:0b:5e:62:81:8f:0e:37:d0:41:72:79: d3:7c:50:d7:0c:4b:ff:8d:4f:ce:d6:d2:54:a4:74: 91:31:bb:fc:e7:28:d9:c4:5b:a0:e7:08:2c:69:0f: ca:7a:9d:26:6f:1d:83:37:57:9e:68:23:13:b0:d7: b6:9c:e3:f3:50:32:17:03:a4:19:dc:7e:6c:9d:e5: 10:02:59:ea:0d:be:87:7c:83:d7:50:60:71:d3:01: 1f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:98:C2:17:62:0E:9E:A7:48:55:59:9C:D9:BF:E0:F0:0F:79:68:10 X509v3 Authority Key Identifier: keyid:36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:0f:eb:d9:5f:9a:54:b1:2e:04:cc:96:a4:30:c1:7c:a8:6a: 5b:55:be:9b:76:ef:32:51:13:e9:86:80:25:bb:e9:d9:bc:94: 1b:1e:2d:62:c0:73:4f:a7:f6:6a:e5:08:30:0f:fc:e2:03:2a: 8b:6d:62:4a:61:95:e2:d1:09:a1:68:52:02:a5:55:59:1c:ed: 63:80:ed:7c:8c:0b:8e:be:25:cf:98:cb:fa:60:d4:b9:bd:4d: 6b:f5:af:11:10:29:b5:92:b8:db:82:bd:ce:33:83:64:5c:df: ee:7d:3c:85:ce:84:c7:a5:61:65:40:47:8a:9c:ed:79:a7:7d: 23:bd:95:2c:7a:c2:09:2d:0b:fe:b3:cf:db:ee:1d:8f:42:30: d8:5b:b2:fe:5a:52:ab:2e:a0:39:64:f9:39:88:51:cb:0a:b0: df:e0:a6:57:6d:1c:65:9e:7f:06:dc:14:97:81:3d:6d:1e:70: e3:26:41:50:8f:92:2d:48:0c:a1:cd:7c:4b:2d:6a:9c:e2:ef: c7:65:4a:d6:06:cb:61:76:ae:61:dc:8a:26:1c:0a:f5:dd:72: fc:f8:97:b6:9f:f4:0b:2c:f0:60:6e:99:17:90:80:2a:b0:dc: 77:e4:0d:b9:31:66:f7:3f:fe:c4:62:30:66:bf:e5:de:c0:85: c7:b9:d6:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav5ZUXqxXB2LO6JMqETQjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YmU2OTdjODQ4OWY0ODIyMjBmNWM0MDY0YmFiZTRjODNj NDE5ZDYwHhcNMjUxMjI2MTMwMTAzWhcNMjUxMjI3MTMwMTAzWjAzMTEwLwYDVQQD Eyg4Zjk4YzIxNzYyMGU5ZWE3NDg1NTU5OWNkOWJmZTBmMDBmNzk2ODEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqYf2YqW0Ga58ZXgnzcp7Iz7rUEg JV1/UdU0QXAOaIjDNukPSLB/TDqOyIN5NZukKUr4XhG4FCHLdBboxackvzS/Zy2E 09xwiCuWj4RPPDIklpLmUfgfFurS7IvCf3H4soUgQa++22pPXE9lTjm4P6PsEl/N 2HZK8fGAad8+C581qMzaFqhQlzkRqRZXER6RriW0lP4IFbezCrvtHZWd+Zss/7vy UzPXC15igY8ON9BBcnnTfFDXDEv/jU/O1tJUpHSRMbv85yjZxFug5wgsaQ/Kep0m bx2DN1eeaCMTsNe2nOPzUDIXA6QZ3H5sneUQAlnqDb6HfIPXUGBx0wEfVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+YwhdiDp6nSFVZnNm/4PAPeWgQMB8GA1UdIwQY MBaAFDa+aXyEifSCIg9cQGS6vkyDxBnWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnI1cGZJU0o5SUlpRDF4QVpMcS1USVBFR2RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wM2M1OWMtZDI1Ny00OGFjLWJhMzMt YjBlZWFkN2MyNDg4LzEvTnI1cGZJU0o5SUlpRDF4QVpMcS1USVBFR2RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8wM2M1OWMtZDI1Ny00OGFjLWJhMzMtYjBlZWFkN2MyNDg4 LzEvTnI1cGZJU0o5SUlpRDF4QVpMcS1USVBFR2RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAew/r2V+a VLEuBMyWpDDBfKhqW1W+m3bvMlET6YaAJbvp2byUGx4tYsBzT6f2auUIMA/84gMq i21iSmGV4tEJoWhSAqVVWRztY4DtfIwLjr4lz5jL+mDUub1Na/WvERAptZK424K9 zjODZFzf7n08hc6Ex6VhZUBHipztead9I72VLHrCCS0L/rPP2+4dj0Iw2Fuy/lpS qy6gOWT5OYhRywqw3+CmV20cZZ5/BtwUl4E9bR5w4yZBUI+SLUgMoc18Sy1qnOLv x2VK1gbLYXauYdyKJhwK9d1y/PiXtp/0CyzwYG6ZF5CAKrDcd+QNuTFm9z/+xGIw Zr/l3sCFx7nWmw== -----END CERTIFICATE-----Generated at Fri Dec 26 22:48:45 2025 by rpki-client